{"id":709139,"url":"https://alion.io/job/fictiv-lead-security-engineer-2","title":"Lead Security Engineer","company":{"id":1859,"name":"Fictiv","domain":"fictiv.com","url":"https://alion.io/company/fictiv","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":72,"open_postings":18,"ghost_share":0.056,"stale_share":0.944,"repost_share":0.056,"time_to_fill_p50_days":49,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Schaumburg, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":150200,"max":180100,"currency":"USD","period":"year","gross":null,"usd_annual":180100},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Claude","optional":false},{"name":"CMMC","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Okta","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-11T02:15:58Z","employer_posted_date":"2026-09-16","last_verified_at":"2026-11-01T01:30:13Z","board_verified":true,"closed_at":null,"days_open":50,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":50},"description":"About MISUMI Americas\nMISUMI Americas, a division of MISUMI Group, is a leading provider of standard, configurable, and custom manufacturing solutions. By integrating a vast catalog of components with a world-class digital manufacturing platform, MISUMI Americas empowers engineers and procurement teams to accelerate innovation across the entire product lifecycle. With operations in the San Francisco Bay Area and Chicago, the company serves as a vital partner for the most innovative companies in the Americas.\nLead Security Engineer\nMISUMI Americas - Schaumburg, IL\nAbout MISUMI Americas\nMISUMI Americas combines Fictiv's digital manufacturing platform with MISUMI's 60+ year legacy of industrial precision, giving engineers and manufacturers a single source for standard, configurable, and custom fabricated parts.\nAbout the Role\nWe're looking for a hands-on Lead Security Engineer to own the full range of security engineering work across MISUMI Americas. You'll secure our infrastructure, run access audits, build and enforce controls, review our systems and code, and help investigate incidents - and you'll have a real voice in the policies and priorities that shape how we handle security company-wide.\nA big part of the job is infrastructure: both physical networking and cloud. You'll keep IAM, security groups, permission policies, and application permissions tightly scoped to least privilege. You'll also sit on our cross-departmental threat detection and incident response group, and act as the escalation point when a routine security issue turns into something bigger than the IT team can handle alone.\nYou'll help decide which security projects matter most across our global operations, run the audits and reviews that back that up, and help shape security policy and standards alongside security leadership. A growing part of the role is AI: you'll manage how our AI tools (including Claude) are configured, decide what new AI capabilities are safe to turn on, and vet integrations - including reviewing new MCP servers - before they go live. You'll also work with Information Security to build and maintain evidence for J-SOX, NIST 800-171, CMMC 2.0, and SOC 2 across a global business.\nWhat You'll Do\nSecurity Decisions & Prioritization\nAct as the hands-on security lead across IT and engineering, and the main point of execution for security work\nHelp decide which security projects and initiatives to tackle first across MISUMI Americas' global operations\nHelp write, shape, and enforce security policies, standards, and governance alongside security leadership\nIncident Response & Escalation\nServe on our cross-departmental threat detection and incident response team, investigating incidents hands-on and helping coordinate the response\nAct as the escalation point for IT, providing direction, mitigations, or solutions when an issue goes beyond routine\nDig into root cause on tougher problems and put fixes in place so they don't recur\nInfrastructure Security\nKeep infrastructure secure across physical networking and cloud - firewalls, segmentation, wireless, and cloud account/workload configuration\nDesign and manage IAM at the infrastructure level: roles, security groups, and permission policies scoped to least privilege\nReview and tighten application permissions and access policies as the environment grows; catch misconfigurations and permission drift early\nIdentity, Access & User Audits\nRun user access audits and regular access reviews across identity and application layers\nDetermine what user groups and roles are needed to manage system access\nHandle access changes as people join, move, and leave, keeping permissions aligned with policy\nAI Security\nManage enterprise AI tools such as Claude, keeping configurations, roles, and access current\nEvaluate new AI capabilities (e.g., Claude for Chrome) and decide whether to enable them and what guardrails they need\nVet new AI integrations before launch, including automated scans and manual review of any new local MCP server\nTurn AI security decisions into reusable policies and practices\nApplication & Engineering Security\nReview systems for security issues, including running automated scans\nVet third-party and open-source components before adoption\nPartner with engineering to build security into how we ship software and infrastructure\nCompliance & Audit Support\nGather and maintain audit evidence for J-SOX, NIST 800-171, CMMC 2.0, and SOC 2\nRun recurring compliance checks and validate controls across our global footprint\nMap controls and evidence to audit requirements and support audits start to finish, with a focus on evidence and remediation\nPolicy, Process & Automation\nTurn manual security work into documented practices, runbooks, and repeatable processes\nAutomate access reviews, monitoring, alerting, and reporting\nKeep security documentation and the internal knowledge base current\nWhat We're Looking For\nSenior-level, hands-on expertise across identity and access management, infrastructure/cloud security, governance and compliance, incident response, application/integration security, and AI/LLM security\nHands-on incident investigation experience and the judgment to serve as an escalation point on user-facing threats like phishing and spam\nStrong experience securing infrastructure across networking and cloud - firewalls and segmentation on the network side; IAM, security groups, permission policies, and application permissions on the cloud side\nCloud security experience (AWS, Azure, or similar) and comfort designing roles/RBAC in platforms like Microsoft Entra ID, Okta, or AWS IAM\nFamiliarity with security monitoring and detection tools sufficient to support investigations\nReal experience running user access audits, access reviews, and compliance checks\nExperience supporting audit/compliance programs such as SOC 2, NIST 800-53/800-171, CMMC 2.0, and J-SOX, including evidence gathering and control validation\nSolid application security skills: automation tooling, secure code review, and secure integration practices\nConfidence to make independent security decisions and sort competing priorities\nWorking understanding of AI/LLM security - administering AI tools, weighing new capabilities for risk, and evaluating integrations like MCP servers\nA habit of converting manual security work into repeatable process and automation\nClear communication and the ability to work across a distributed, multi-site, global organization\nLocation\nThis role is located at our Schaumburg, IL office.\nCompensation\n$150,200 - $180,100\nEligibility\nCandidates must be a US citizen or green card holder.\nWe’re actively seeking teammates who:\nBring diverse perspectives and experience to our culture and company. \nExcel at being part of a strong, empathetic team.\nThrive in an environment emphasizing respect, honesty, collaboration, and growth.\nHave an ‘always learning’ mindset that celebrates learning, not just wins. \nHelp us continue to build a world-class organization that values the contributions of all of our teammates\nWe encourage applications from members of underrepresented groups, including but not limited to women, members of the LGBTQ community, people of color, people with disabilities, and veterans.","description_format":"text","description_chars":7227,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Contract Manufacturing","Manufacturing & Industrial Software"],"lifecycle":[{"event":"open","at":"2026-09-11T04:20:11Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3","filings_12m":3,"filings_prev_12m":5,"green_card_filings_12m":0,"median_offered_wage_usd":162500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":31,"band":"fade","label":"Fading","p_open":1,"p_active":0.558,"p_room":0.55,"age_days":50,"expected_fill_days":49,"reasons":["conf:2","stale_co","velocity","win:tail"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":180100,"is_top_pay":false},"html_url":"https://alion.io/job/fictiv-lead-security-engineer-2","json_url":"https://alion.io/job/fictiv-lead-security-engineer-2.json","meta":{"generated_at":"2026-11-01T01:55:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2863,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1859},"rest":"https://alion.io/mcp/rest/get_company?id=1859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffictiv-lead-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffictiv-lead-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffictiv-lead-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fictiv-lead-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffictiv-lead-security-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":709139}},{"tool":"search_jobs","arguments":{"company":"fictiv.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":709139},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}